sops: Improve secrets provisioning to split out staging
This commit is contained in:
parent
ab3aa19481
commit
6a81ce4c1d
8 changed files with 151 additions and 7 deletions
configuration
|
@ -10,6 +10,7 @@
|
|||
./services/webserver.nix
|
||||
./services/starbound.nix
|
||||
./ids.nix
|
||||
./sops.nix
|
||||
];
|
||||
|
||||
nix = {
|
||||
|
@ -25,11 +26,6 @@
|
|||
nixpkgs.config.allowUnfreePredicate = pkg:
|
||||
builtins.elem (lib.getName pkg) ["steam-runtime" "steamcmd"];
|
||||
|
||||
sops = {
|
||||
defaultSopsFile = ../keys/external.yaml;
|
||||
secrets.steam = {};
|
||||
};
|
||||
|
||||
# Optimization for minecraft servers, see:
|
||||
# https://bugs.mojang.com/browse/MC-183518
|
||||
boot.kernelParams = ["highres=off" "nohz=off"];
|
||||
|
|
Loading…
Add table
Add a link
Reference in a new issue